DEA-C01 Question 441
Select 3Your company is using AWS Identity and Access Management (IAM) to secure access to AWS resources. As a data engineer, you need to assign specific permissions to a new IAM role that will access your Amazon S3 buckets for data processing. You are considering whether to use an AWS managed policy or create a customer managed policy. Which of the following statements accurately describe the differences between these two policy types?
- A
AWS managed policies are maintained and updated by AWS, while customer managed policies are created and maintained by the user.
- B
Customer managed policies can be tailored to specific use cases, while AWS managed policies are designed for general use cases.
- C
AWS managed policies allow granular control over permissions, while customer managed policies only support predefined permission sets.
- D
AWS managed policies cannot be attached to IAM roles, while customer managed policies can.
- E
Customer managed policies provide more flexibility for custom permissions compared to AWS managed policies.
Show answer and explanation
Correct answers: A, B, E
Explanation
The key differences between AWS managed policies and customer managed policies lie in who creates and maintains them, their flexibility, and their intended use cases. AWS managed policies are created and updated by AWS and cater to common scenarios, while customer managed policies are designed and maintained by users to meet specific organizational or application needs. Understanding these differences helps in choosing the right policy type for your use case.
- A. Correct.
Correct: AWS managed policies are pre-built and maintained by AWS, ensuring they are updated to reflect changes in AWS services. Customer managed policies, on the other hand, are customized and maintained by the user.
- B. Correct.
Correct: Customer managed policies can be tailored to meet specific application or organizational needs, whereas AWS managed policies are designed to cater to common, general use cases.
- C. Incorrect.
Incorrect: This is not true. Both AWS managed and customer managed policies allow granular control over permissions, but customer managed policies provide more flexibility for customization.
- D. Incorrect.
Incorrect: AWS managed policies can be attached to IAM roles just like customer managed policies. This statement is false.
- E. Correct.
Correct: Customer managed policies allow users to define custom permissions, giving them more flexibility than the predefined AWS managed policies.